Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa
File:                     3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa (raw, json)
Hash identifier:          EGTv4ODfNwQxl88j38jrHaslDh4moMQ3SNrPFfiKGbE=
Subject key identifier:   EA:61:52:DF:A0:93:F1:FF:D8:87:84:F7:38:A3:A1:80:84:77:0D:DC
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       60849024BA854EA4CCE7F9C897CE40E4F6F78193
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa
Signing time:             Tue 05 Mar 2024 17:53:01 +0000
ROA not before:           Tue 05 Mar 2024 17:48:01 +0000
ROA not after:            Tue 04 Mar 2025 17:53:01 +0000
asID:                     64130
IP address blocks:        201.218.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:84:90:24:ba:85:4e:a4:cc:e7:f9:c8:97:ce:40:e4:f6:f7:81:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:01 2024 GMT
            Not After : Mar  4 17:53:01 2025 GMT
        Subject: CN=EA6152DFA093F1FFD88784F738A3A18084770DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:14:7f:64:9c:93:44:28:39:19:a6:27:33:
                    4b:b1:78:47:ff:a5:47:eb:43:c4:2d:13:ae:97:79:
                    cd:55:78:c8:07:c6:34:fc:a0:42:d6:6a:9b:52:c8:
                    86:c2:ea:fd:31:47:67:b6:ab:e7:d9:26:0c:ab:f6:
                    bd:38:df:02:6f:16:0d:75:01:dd:f4:95:38:9e:ee:
                    09:a1:59:82:9a:3d:c7:b2:40:cf:43:b2:a8:a9:ce:
                    17:b9:8a:4e:6a:ff:65:7a:fd:ea:04:80:b9:4e:e2:
                    0b:86:aa:21:14:c8:ae:b2:d1:23:c6:70:a9:94:49:
                    15:b4:02:fc:6a:3f:35:d5:58:e2:21:75:e5:d1:33:
                    3a:16:41:6e:b2:68:67:33:35:45:85:af:bc:0a:ef:
                    07:2a:cf:ac:4c:76:67:16:e2:52:90:b9:a2:c6:18:
                    f0:2c:1f:09:c1:69:4b:9a:cd:dd:44:ea:a9:b0:74:
                    e6:ea:5d:97:7c:fb:d4:bf:2d:59:e1:82:7a:ce:66:
                    87:59:f3:77:6f:b4:57:0f:41:78:a3:e9:09:b7:26:
                    ce:c7:25:8a:df:f5:e9:91:06:40:16:b1:73:84:73:
                    87:9d:54:dd:6d:69:6c:9c:54:50:41:57:b3:3d:80:
                    c6:9f:75:33:a1:55:c1:d0:00:b1:c5:77:0b:83:85:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:52:DF:A0:93:F1:FF:D8:87:84:F7:38:A3:A1:80:84:77:0D:DC
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:42:c1:d0:27:23:58:ca:bc:cc:1c:d8:b5:77:eb:c7:6c:c2:
         60:7e:aa:a4:ae:ec:85:a3:a2:cb:05:c0:e3:cf:23:eb:c2:2b:
         81:6e:ea:95:34:79:f0:3a:68:39:40:e9:4b:15:ca:3f:56:65:
         c2:f3:7e:f8:6b:3e:b6:2f:ee:25:a0:d0:5d:74:8f:75:35:d7:
         92:e2:d7:ed:a7:30:c8:c4:eb:83:24:4d:f6:1a:20:ab:55:75:
         c9:37:cd:d7:53:b9:46:67:d3:de:95:37:4a:d5:a9:1b:11:5e:
         1d:2c:3e:2e:7a:58:9f:1f:e7:b9:18:4e:e8:ae:b5:9c:cc:79:
         b0:ae:6b:2e:68:7a:2a:ab:a2:c2:af:50:91:cf:c7:26:75:74:
         b9:f1:8c:ec:90:4a:30:4b:c7:8a:d7:c5:08:fd:db:89:99:f9:
         16:65:a7:12:52:02:ae:f6:23:ef:38:0e:60:bb:2c:7e:58:9e:
         92:c9:2e:7e:b9:29:e0:3d:89:d5:41:6a:c0:47:e9:b4:a6:69:
         6d:ac:0f:9d:38:ce:3c:a3:68:14:38:31:d9:04:bb:3c:e3:22:
         30:ec:3a:72:c0:22:90:20:33:7a:c9:71:fd:ba:27:5c:a3:1f:
         06:63:b9:03:65:93:3f:23:e2:ce:1a:63:6e:81:d7:2c:09:f5:
         bc:1f:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org